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CLAIMS: 



A method of facilitating access control to content, 

the method involving entities each being identified by a unique identifier, 
the method fiirther involving revocation of at least one unique identifier, 

where a revoked unique identifier is fiirther referred to as revoked 



identifier. 



the method comprising maintaining a local revocation list (165) of entries, 
each entry representing at least one revoked identifier, 

characterized in that 

the entries in the local revocation list are generated by applying a conversion 
10 step to the at least one unique identifier generating a shorter representation xmiquely 
identifying that at least one unique identifier. 

2. The method according to claim 1, the method fiirther comprising 
receivmg (302) a new revoked identifier (1 12), 

15 performing the conversion step, and 

subsequently updating the local revocation list with the generated shorter 
representation of the received new revoked identifier, 

3. The method according to claim 1, the method further comprising a verification 
20 step m which a unique identifier is verified by 

applymg the conversion step to the unique identifier, 

comparing the shorter representation of the unique identifier with the entries in 
the local revocation list, and 

the unique identifier is considered to be revoked when the comparison finds a 
25 match between the shorter representation of the unique identifier and an entry in the local 
revocation list 
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4. The metfiod according to claim 1 , wherein the conversion step comprises the 

computation of a hash of the at least one unique identifier, the hash becoming the shorter 
representation. 

5 5. The method according to claim 1, wherein the method further comprises 

secure storing of the local revocation list. 

6. A generator method of issuing unique identifiers, comprising the step of 
generating a new unique identiiBer, characterized in that 

10 the generator method performs the conversion step of claim 1 on the new 

unique identifier, 

resulting in a shorter representation, 
the generator method rejecting the issuing of the new imique identifier if 
the shorter representation of the new unique identifier matches 
15 the shorter representation of any of the previously issued generated 

unique identifiers. 

7. The generator method according to claim 6, wherein 

the generator method maintains a history list of the shorter representation of 
20 the new unique identifier, and wherein 

the generator method rejects the new unique identifier if 

the shorter representation of the newly generated unique identifier 

matches 

an entry in the history list 

25 

8. A system (100) for controlling access to content material (1 10), 

the system comprising entities being identified by unique identifiers, 

the system further being arranged to handle revocation of at least one unique 

identifier, 

30 the system comprising a local revocation list (165) of entries, 

each entry representmg at least one revoked identifier, 
the system further comprising a receiver (150) for receiving a new revoked 
identifier (112), and 
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an updater (160) for updating the local revocation list with the received new 
revoked identifier, characterized in that 

the entries in the local revocation list are generated by applying a conversion 
step to the received new revoked identifier generating a shorter representation uniquely 
5 identifying the received new revoked identifier. 

9. The system (1 00) according to claim 8, in which the system further comprises 

an access device (120) for controlling access to content material (1 10), 
the access device being identified by a unique identifier, 
10 the access of the access device to the content material is not being allowed if a 

match is foimd between 

the shorter representation of the unique identifier of tiie access device. 
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and 



an entiy in the local revocation list (165). 



10. A device (101) arranged 

to store a local revocation list (165) of entries, 
each entry representing at least one revoked identifier, 
to receive a new revoked identifier (1 12), and 
20 to add an entry containing the new revoked identifier to the local revocation 

list, 

characterized in that the device is further arranged to 

generate the entry in the local revocation list by applying a conversion step to 
the new revoked unique identifier generating a shorter representation uniquely identifying 
25 tiiat new revoked identifier. 



11. A computer program product (181) capable to implement the method 

according to claim 1. 



